:00Thu 24 Sep
Access control
About access control
Roles are sets of actions. People and Teams hold them through grants on a scope: the site, an area or a rack.
A saved role changes what the server allows from the next request.
5 roles · 63 actions
Only one active administrator
If Eszter Szabó is locked out, only the recovery code helps.
How access works here
- Step-up on every security action: roles, grants, badges, passcodes, Recovery mode. The passcode is asked again, every time.
- 1 active administrator: Eszter Szabó. The last one can’t be deactivated or demoted.
- Approvals are off by default. A preset switches them per action and scope: Policies.
- Recovery code: held sealed by the site; vendor staff never hold it. Recovery.
| Right | Operator | Supervisor | Administrator | Auditor | Commissioning | Held by |
|---|---|---|---|---|---|---|
| Floor work | 12 of 12 | 9 of 12 | 4 of 12 | 2 of 12 | 7 of 12 | |
| Open Floor | 5 of 5 roles | |||||
| Open Put in | 3 of 5 roles | |||||
| Open Take out | 3 of 5 roles | |||||
| Open Rack view | 5 of 5 roles | |||||
| Put reels in and take them out, move and swap them | One role only | |||||
| Light up a bay | 3 of 5 roles | |||||
| Record a scan or a count mark | 3 of 5 roles | |||||
| Report at a station or from Help | 3 of 5 roles | |||||
| Call for help | 3 of 5 roles | |||||
| Hand work on when signing out | One role only | |||||
| Choose a working rack | One role only | |||||
| Clear the notices | 3 of 5 roles | |||||
| Review queue and counts | 4 of 7 | 7 of 7 | 2 of 7 | 2 of 7 | 0 of 7 | |
| Open Review queue | 4 of 5 roles | |||||
| Open Counts | 4 of 5 roles | |||||
| Count bays | 2 of 5 roles | |||||
| Arrange the floor board | 2 of 5 roles | |||||
| Answer help calls | One role only | |||||
| Send people to a rack, take alerts over | One role only | |||||
| Decide review items, count differences, overrides and permits High risk | One role only | |||||
| Stock and orders | 5 of 8 | 8 of 8 | 4 of 8 | 3 of 8 | 1 of 8 | |
| Open Inventory | 4 of 5 roles | |||||
| Open Demand | 4 of 5 roles | |||||
| Open Replenishment | 3 of 5 roles | |||||
| Open Material planning | 3 of 5 roles | |||||
| Correct a reel’s record | 3 of 5 roles | |||||
| Work on work orders | 2 of 5 roles | |||||
| Request reels for a line | One role only | |||||
| Change material planning | One role only | |||||
| Master data | 0 of 5 | 1 of 5 | 5 of 5 | 0 of 5 | 0 of 5 | |
| Open Parts & master data | 2 of 5 roles | |||||
| Open Label rules | One role only | |||||
| Open Data import | One role only | |||||
| Change parts, reels and label formats | One role only | |||||
| Import data High risk | One role only | |||||
| Reports | 0 of 1 | 1 of 1 | 1 of 1 | 1 of 1 | 0 of 1 | |
| Open Reports | 3 of 5 roles | |||||
| Equipment | 0 of 7 | 2 of 7 | 6 of 7 | 1 of 7 | 5 of 7 | |
| Open Equipment | 4 of 5 roles | |||||
| Open Rack setup | 2 of 5 roles | |||||
| Run safe checks on equipment | 2 of 5 roles | |||||
| Change a rack's configuration | 2 of 5 roles | |||||
| Change racks in service without a permit, a move or a handover High risk | One role only | |||||
| Commission racks and put them in service High risk | 2 of 5 roles | |||||
| Add and change devices, their keys and the plant's areas; accept a rack's handover | One role only | |||||
| Server and connections | 0 of 7 | 0 of 7 | 7 of 7 | 1 of 7 | 0 of 7 | |
| Open Integrations | 2 of 5 roles | |||||
| Open System | One role only | |||||
| Search for and forget controllers | One role only | |||||
| Approve the rack network | One role only | |||||
| Change connected systems | One role only | |||||
| Retry or hold deliveries to connected systems High risk | One role only | |||||
| Change snapshots, the certificate and the licence High risk | One role only | |||||
| Administration | 0 of 4 | 1 of 4 | 4 of 4 | 0 of 4 | 0 of 4 | |
| Open People & teams | 2 of 5 roles | |||||
| Change people, Teams, grants and badges High risk | One role only | |||||
| Publish policies and presets High risk | One role only | |||||
| Set up the site at first start | One role only | |||||
| Stations and apps | 3 of 3 | 3 of 3 | 2 of 3 | 0 of 3 | 2 of 3 | |
| Use a station kiosk | 4 of 5 roles | |||||
| Use a handheld | 2 of 5 roles | |||||
| Scan with a phone camera | 4 of 5 roles | |||||
| Access and recovery | 0 of 3 | 0 of 3 | 3 of 3 | 1 of 3 | 0 of 3 | |
| Open Access control | 2 of 5 roles | |||||
| Change roles and their actions High risk | One role only | |||||
| Run Recovery mode and break-glass High risk | One role only | |||||
| Every role | 6 of 6 | 6 of 6 | 6 of 6 | 6 of 6 | 6 of 6 | |
| Open Activity | 5 of 5 roles | |||||
| Open Language | 5 of 5 roles | |||||
| Open Settings | 5 of 5 roles | |||||
| Export, with a receipt | 5 of 5 roles | |||||
| Ask for access | 5 of 5 roles | |||||
| Try the UI kit | 5 of 5 roles | |||||
| Rights per role | 30 | 38 | 44 | 17 | 21 |
- Has right
- Doesn’t
- One role only
- One role